WordPress Premmerce Product Filter for WooCommerce plugin <= 3.6.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Premmerce Product Filter for WooCommerce plugin versions = 3.6.1. Solution Update the WordPress Premmerce Product Filter for WooCommerce plugin to the latest available version at least 3.6.2...

WordPress Bulk Auto Image Title Attribute (Image Title tag) optimization (Image SEO) + Woocommerce plugin < 1.2.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Bulk Auto Image Title Attribute Image Title tag optimization Image SEO + Woocommerce plugin versions 1.2.3. Solution Update the WordPress Bulk Auto Image Title Attribute Image Title tag optimization...

WordPress Elasta theme < 1.0.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Elasta theme versions 1.0.8. Solution Update the WordPress Elasta theme to the latest available version at least 1.0.8...

WordPress Super Video Player plugin <= 1.6.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Super Video Player plugin versions = 1.6.9. Solution Update the WordPress Super Video Player plugin to the latest available version at least 1.6.11...

WordPress WooCommerce Variation Swatches for Products plugin <= 1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Variation Swatches for Products plugin versions = 1.1. Solution No patched version available...

WordPress ICEcoder integration plugin <= 2.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress ICEcoder integration plugin versions = 2.0.2. Solution No patched version available...

WordPress Automizy Gravity Forms plugin <= 1.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Automizy Gravity Forms plugin versions = 1.0.3. Solution No patched version available...

WordPress Custom User Guide plugin <= 1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Custom User Guide plugin versions = 1.0. Solution Update the WordPress Custom User Guide plugin to the latest available version at least 1.0.1...

WordPress Full Page Blog Designer plugin <= 1.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Full Page Blog Designer plugin versions = 1.0.2. Solution No patched version available...

WordPress XT Points & Rewards for WooCommerce plugin <= 1.4.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress XT Points & Rewards for WooCommerce plugin versions = 1.4.2. Solution Update the WordPress XT Points & Rewards for WooCommerce plugin to the latest available version at least 1.4.3...

WordPress CO2ok: carbon offsetting for e-commerce plugin <= 1.0.9.21 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress CO2ok: carbon offsetting for e-commerce plugin versions = 1.0.9.21. Solution Update the WordPress CO2ok: carbon offsetting for e-commerce plugin to the latest available version at least 1.0.9.22...

WordPress Checkbox plugin <= 0.8.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Checkbox plugin versions = 0.8.3. Solution Update the WordPress Checkbox plugin to the latest available version at least 0.8.4...

WordPress Food Recipes plugin <= 2.1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Food Recipes plugin versions = 2.1.1. Solution Update the WordPress Food Recipes plugin to the latest available version at least 2.1.2...

WordPress Front End PM plugin < 11.3.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Front End PM plugin versions 11.3.4. Solution Update the WordPress Front End PM plugin to the latest available version at least 11.3.4...

WordPress Menu Item Scheduler plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Menu Item Scheduler plugin versions = 1.0.0. Solution No patched version available...

Unauthorised AJAX Calls via Freemius

Description The plugins and themes use an insecure version of the Freemius Framework, which is lacking CSRF and/or authorisation in some of its AJAX actions. As a result, any authenticated users, such as subscriber could access the debug logs. Unauthenticated attackers could also make a logged in...

WordPress Widgets on Pages plugin <= 1.5.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Widgets on Pages plugin versions = 1.5.0. Solution Update the WordPress Widgets on Pages plugin to the latest available version at least 1.6.0...

WordPress VO Store Locator – WP Store Locator Plugin plugin <= 3.3.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress VO Store Locator – WP Store Locator Plugin plugin versions = 3.3.0. Solution No patched version available...

WordPress WP Store Locator – Extenders plugin < 1.3.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Store Locator – Extenders plugin versions 1.3.1. Solution Update the WordPress WP Store Locator – Extenders plugin to the latest available version at least 1.3.1...

WordPress Email Header Footer plugin <= 1.2.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Email Header Footer plugin versions = 1.2.1. Solution No patched version available...